registry / create-pmos / 0.499.0
create-pmos@0.499.0
Scaffold the PMOS portable kit — run the PMOS product-management workflow (initiative → lane-fit spec → contract → build → three gates, with work-type lanes for features, research, maintenance, incidents, and content) entirely inside your own repo, with a
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged process execution and agent configuration writes serve explicit CLI actions. Prompt routing is restricted to the local workspace and only forwards prompts to the configured service when its key, repository consent, and routing switch are all present.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The CLI acts when invoked; external prompt routing requires a saved key, repository consent, and the routing setting enabled.
Impact
When routing is explicitly enabled, prompt text may leave the machine for classification; no credential theft or unrelated collection was identified.
Mechanism
The cockpit sends prompts to a loopback workspace endpoint, which may classify them through the fixed TypeSafe service endpoint.
AI rationale
The flagged process execution and agent configuration writes serve explicit CLI actions. Prompt routing is restricted to the local workspace and only forwards prompts to the configured service when its key, repository consent, and routing switch are all present.
Evidence
[target]/pmos[target]/.pmos-profile[target]/.gitattributes[target]/.claude/settings.json[target]/.claude/skills
Network endpoints2
127.0.0.1:<port>/api/model/routeapi.typesafe.ai/v1/systemone
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI whose vendor, update, and workspace actions are selected from explicit command-line arguments.
- The vendor command copies the bundled kit into the chosen repository and writes project configuration there.
- The cockpit mod accepts only a loopback workspace route URL and posts prompts to that local endpoint.
- Forwarding prompts to Jev requires a saved key, repository consent, and routing enabled; routing defaults off, and secret-scanned or excluded prompts are withheld.
- The optional Jev request uses the fixed api.typesafe.ai service endpoint with the configured key, consistent with the prompt-routing feature.
Evidence against
- The workspace can install native dependencies and launch a local server when the user invokes the workspace command.
- With explicit key, consent, and routing settings, prompt text can be sent to the TypeSafe service for classification.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEval
Source & flagged code
14 flaggedworkspace/premium-viewer-share-test.jsView file
61patternName = generic_password
severity = medium
line = 61
Medium
Secret Pattern
Package contains a possible secret pattern.
workspace/premium-viewer-share-test.jsView on unpkg · L61bin/create-pmos.jsView file
23const path = require('path');
L24: const { spawnSync } = require('child_process');
L25:
High
Child Process
Package source references child process execution.
bin/create-pmos.jsView on unpkg · L23181const probe = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L182: try { return spawnSync(probe, { stdio: 'ignore', shell: true }).status === 0; }
L183: catch { return false; }
High
Shell
Package source references shell execution.
bin/create-pmos.jsFindings
2 Critical7 High7 Medium5 Low
CriticalCredential Exfiltrationpayload/mods/pmos-cockpit/hooks/register.tsx
CriticalPrevious Version Dangerous Deltaworkspace/lib/claude-readiness.js
HighChild Processbin/create-pmos.js
HighShellbin/create-pmos.js
HighEvalworkspace/public/vendor/pdf.worker.min.js
HighSame File Env Network Executionworkspace/premium-chat-chart-tab-test.js
HighCommand Output Exfiltrationworkspace/server.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/create-pmos.js
HighSemantic Analysis Limitedbin/create-pmos.js#virtual:normalized:round1
MediumSecret Patternworkspace/premium-viewer-share-test.js
Medium
Affected versions and remediation
This report applies to create-pmos@0.499.0.
See all versions of create-pmos for other recorded verdicts.
- Review the evidence and your use of create-pmos@0.499.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.